Engineering Notes

Writing about systems I build, operate, troubleshoot, and improve.

01

Wrapping Your Infrastructure Access

Moving administrative infrastructure access behind a private identity-aware network and examining the security impact through Wazuh monitoring.

Tailscale
Wazuh
Linux
Security
Read
02

Building a GitOps Application Provisioning Pipeline

Designing an asynchronous pipeline connecting an API, MongoDB desired state, Redis queues, provisioning workers, Git repositories, FluxCD, and Kubernetes.

Node.js
BullMQ
GitOps
FluxCD
Kubernetes
Read
03

Runtime Visibility in Kubernetes with eBPF

Using runtime telemetry to understand process execution, process lineage, privileges, filesystem activity, and network behaviour.

Tetragon
eBPF
Kubernetes
Runtime Security
Read
04

Why Provisioning Work Should Not Run Inside HTTP Requests

Designing reliable asynchronous infrastructure workflows using background jobs, retries, status tracking, and real-time progress updates.

BullMQ
Redis
Node.js
Distributed Systems
Read